OneTwo ScrumThis privacy policy applies to the OneTwo Scrum app on iPhone, iPad and Mac. It supplements the general privacy policy of this website, which covers visiting the website itself.
1. Data Controller
Christian Drapatz
Kämpenstraße 42
45147 Essen
Germany
Email: support@onetwoapps.com
2. Core Principle: Your Data Stays With You
OneTwo Scrum requires no account and no sign-in. The developer does not run a server that the app sends data to. The app contains no advertising, no tracking, no analytics or advertising SDKs and no AI services, and it does not build usage profiles. The developer receives neither your projects and issues nor any information about how you use the app.
3. What Data the App Processes
The app stores what you enter yourself: projects with their settings, releases, sprints including review and retrospective, board columns and the definition of done, as well as issues with title, comments, subtasks, links, details such as type, priority, assignee, reporter, component, estimate and bug analysis, due date, reminder, status, tags and color tags, plus groups, attachments (files, photos, scans, sketches) and your settings. Names such as “Assignee” or “Reporter” are text you enter; the app does not link them to any account or contact. This data is kept in your device's protected storage. On iPhone and iPad it is additionally protected by the operating system's data encryption until the device has been unlocked for the first time after a restart.
The app starts locked and opens with Face ID, Touch ID or your device passcode, on the Mac with Touch ID or your login password. Biometric checks are handled by the operating system; the app receives no biometric data. If you set a master password, the app stores only a verification value in your iCloud Keychain, never the password itself.
On the Mac you can choose the “Local File” mode instead of iCloud. Your data is then additionally kept in a file encrypted with your file password, in a place of your choice such as a USB drive or network drive; iCloud sync is turned off in this mode.
4. iCloud Sync (Optional)
On first launch, the app asks whether you want to use iCloud. Only if you agree are your projects, issues, groups, attachments and synced settings synchronized between your Apple devices through your own, private iCloud database. The transfer takes place exclusively via Apple's iCloud. The developer has no access to this data.
The app stores the contents of your projects, issues and groups in iCloud in encrypted fields whose keys are kept only on your devices (end-to-end encryption). Attachments are stored as files in iCloud. They are end-to-end encrypted only if you have turned on Advanced Data Protection for iCloud in your Apple Account; otherwise they are protected by Apple's standard encryption. Apple processes technical information such as modification times to operate the sync.
You can disconnect from iCloud at any time in the app's settings. You can manage or delete data already stored in iCloud through the app (see section 12) or in your device's settings under your name › iCloud. Apple's privacy policy additionally applies: apple.com/legal/privacy.
5. Reminders and Notifications
The app schedules reminders exclusively on your device using the operating system's notification feature. There is no developer push server. The app only asks for notification permission when you set your first reminder.
By default, a notification shows the issue title, the project name and the due date. Depending on your system settings, it may also appear on the Lock Screen. In the app's settings you can turn off the “Titles in Notifications” switch; the notification then shows only a neutral message. You also control when previews are visible on the Lock Screen in your system settings under “Notifications”.
6. Widgets
For widgets, the app stores a small file containing the issues and active sprints shown in a protected area on your device that only the app and its widgets can read. This file never leaves the device. Titles in widgets are marked as sensitive, so the system can hide them while the device is locked. With the “Titles in Widgets” switch in the settings you can turn off titles in widgets entirely; they are then not written to the file either.
7. Siri and Shortcuts
With Siri and the Shortcuts app you can add issues, complete them, add them to My Day, open projects and issues or show a Scrum view. For this, the app provides only the data required for the respective command. Actions that change data require an unlocked device. Apple processes voice input; Apple's privacy terms for Siri apply.
8. Camera, Photos and Text Recognition
On iPhone and iPad, the app asks for camera access only when you want to take a photo, scan a document or recognize text. Text recognition runs entirely on your device; no images or recognized text are sent to a server. You pick photos from your library using the system photo picker. The app receives only the pictures you select and does not read your library.
Only if you turn it on in the app's settings does the app additionally save the original of your camera and scanner captures to your photo library. For this it asks for permission to add photos; this does not include read access to your library. The Mac app does not use a camera.
9. Sharing, Printing, Export and Backup
When you share or print projects or issues, export them as PDF, text, Markdown or JSON, or create a backup, these files are created only at your request. You decide where they go, for example to the Files app, a printer or another app. Further processing by the app or service you choose is governed by its own privacy policy. When you import a backup, the app checks the file on your device before taking over any data.
10. Feedback by Email
The “Send feedback” option in the settings opens your email app with a prepared message to support@onetwoapps.com. The app never sends anything by itself; you see and send the message in your email app.
Only if you turn on the “Include diagnostic data” switch (off by default) does the app add technical information: app version and build, major operating system version, device class (for example iPhone or Mac), configured languages, notification and reminder status, iCloud connection state, the number of groups, projects, issues, attachments and changes not yet synced, and the latest technical error codes. Titles, comments, names, attachments and file names are never included. The app shows you the exact text before sending.
I use your email and its contents only to answer your request, and I delete it once the matter is settled, unless statutory retention obligations apply.
11. Crash Reports via Apple
The app contains no crash reporting tool of its own. If you have agreed in your system settings to share analytics with app developers, Apple provides the developer with anonymized crash reports and usage statistics. These contain no content of your projects and issues. You can withdraw this consent at any time in your system settings under “Privacy & Security” › “Analytics & Improvements”.
12. Retention and Deletion
Your data is stored until you delete it. Deleted issues, projects and groups first go to the app's Trash, where you can restore them or delete them permanently.
Under Settings › “Data” › “Reset” › “Delete Everything”, after two confirmations, you permanently remove all issues, projects and groups including attachments on all devices using your iCloud account. So that deletions reach your other devices, small technical deletion markers without any content remain in iCloud. Backups and exports you have stored outside the app are not affected. If you uninstall the app, its data on that device is removed. Your data in iCloud remains until you delete it through the app or your device's iCloud settings.
13. Access Permissions at a Glance
OneTwo Scrum asks for permissions only for features you actually use: notifications for reminders, the camera for photos, scans and text recognition (iPhone and iPad), and adding to your photo library if you turn on saving captures. iCloud sync requires an internet connection. You can change all permissions at any time in your system settings; the app offers a direct link under “Permissions” in its settings.
14. Legal Basis
Processing your data in the app serves to provide the features you use (Art. 6 (1) (b) GDPR). The app uses iCloud sync, reminders, the camera, saving to your photo library and attaching diagnostic data only with your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future by turning off the respective feature in the app or in your system settings. Answering email requests is based on Art. 6 (1) (b) or (f) GDPR (legitimate interest in answering your request).
15. Disclosure to Third Parties
The developer does not share or sell any data. Apple processes data only to the extent technically required when you use iCloud, Siri, notifications or the system's analytics.
16. Your Rights
Your projects and issues are stored exclusively on your devices and, if you choose, in your own iCloud account. You can view, edit, export and delete them in the app at any time. In addition, subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Germany).
17. Changes
If the app changes in a way that affects how data is processed, I will update this privacy policy. The version published here applies.
18. Last Updated
October 2026